Re: [suse-security] port based routing

Hello everybody!

For a server I need the following feature: I have two dedicated lines connected to it. One is ISDN-based (64 kbit/s) the other is a DSL-line (768 kbit/s downstream). The ISDN-line has a static IP, the DSL-line's IP is dynamic.

In order to connect the server from the outside world I need kind of a port based routing.

Following example: The server has a SSH-server running. I want to connect the server over the ISDN-line (I don't know the DSL IP). The server receives my connection packets and tries to return packets. Those packets are sent over the DSL-line, since it's the default gateway. This way the connection fails. What I need is kind of a port based router. If the server tries to send packets coming from port 22 (SSH) it has to use the ISDN line.

Is it possible to do this in any way?

Please stick to security-related topics on this list. There is nothing that contradicts having two default routes. Take a look at the docs of the ip command, package iproute2. There might be a weapon for this there.

Regards, Andreas

Thanks, Roman. -- - - | Roman Drahtmüller // "You don't need eyes to see, | SuSE GmbH - Security Phone: // you need vision!" | Nürnberg, Germany +49-911-740530 // Maxi Jazz, Faithless | - -